Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier: O0Sb2BZYi4kQioNt8hv1vGuuXPL/djK5z8/KpFzoT3E=
Subject key identifier: D9:18:DA:36:80:C3:EF:D7:78:17:87:D8:6E:91:C6:C5:FA:CB:BF:0D
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 019A4EF4420DB79FC093A152B08145F917D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:21 +0000
Manifest this update: Tue 04 Nov 2025 13:00:21 +0000
Manifest next update: Wed 05 Nov 2025 13:00:21 +0000
Files and hashes: 1: 8BE15BYRjJfhZasQiCcSRq-1rvE.roa (hash: owl3mrEo7nmudL7UJFk7qfjK5dtTSEPpdF0yRa2bSts=)
2: 8pfPZSOu9OxWh0zIohg91aPGe8w.roa (hash: c5LZlJIp5DIk0u0EVUZdwpG29wBKxdLqbOnohSJsuL0=)
3: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: kb0+QrZpxHT0zeRFc6VGnjdjIoU8CBuOHlQ1jQIUxgI=)
4: W5_MS3jBPdXrXt2CXzKVEDSySg4.roa (hash: 5kr0YkXkQlloL0Dx58yHdS9CGeVUoXp4B0GMVprtw4I=)
5: YZdW1FTou_f-R0pbpF5XZ4Tx3hg.roa (hash: zlg3+gSw7tZCxS27EU5I1VhaiNCdA3Z7IiLzIapPksE=)
6: j5QKeuGXTRBwPGjQWWnfRFS80gs.roa (hash: Z4Hp9oqaE6vPUIIGvGUpRfdgDDW4cmfUljTJCbGbKQk=)
7: nAr5TcbaRaUgvGs6GhoEMZYw2k4.roa (hash: PsVErZ9iC+yU1AQTc2kN6DO2ltE02bbxJGF/AxC6Z9Q=)
8: qH4AOngGgCDKos4oiBE8L48PaSU.roa (hash: wAl3jqMD73juUqzGb6OKFl9PHSoZSU+evXbe0KXVLu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:42:0d:b7:9f:c0:93:a1:52:b0:81:45:f9:17:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Nov 4 13:00:21 2025 GMT
Not After : Nov 5 13:00:21 2025 GMT
Subject: CN=d918da3680c3efd7781787d86e91c6c5facbbf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:01:33:dd:d5:b1:51:e3:8d:2c:02:97:0a:
ce:71:a7:38:3d:7c:85:ed:de:62:a3:46:07:6b:91:
b4:fd:d4:84:1a:64:0c:56:37:6f:fa:12:df:27:af:
68:91:e4:f1:49:1a:fe:b8:dc:eb:4a:94:bd:ed:22:
7f:df:32:45:e2:93:ba:84:de:97:9f:93:44:6d:db:
7c:d5:56:8e:dc:64:d3:e8:14:5b:a5:15:cb:14:4d:
c1:e7:dd:d9:a0:99:4c:81:96:3d:1f:19:ad:46:1e:
35:5b:4c:d3:48:28:06:6e:c5:b2:86:ed:ed:7a:9f:
88:0b:e3:fd:f0:ea:e0:92:60:ef:04:96:c8:48:6d:
fa:f2:7d:0d:48:98:5a:d1:d9:6c:92:db:e9:67:2d:
86:d2:af:b4:e3:2a:ed:81:43:ff:15:11:25:0b:cc:
22:84:4e:c2:10:f9:53:8a:c0:85:c2:83:0f:f7:86:
0f:59:58:5e:ff:7b:a8:64:66:12:a6:bc:05:3a:d4:
f5:d7:bc:df:d5:42:a8:84:0a:dd:4e:f0:7f:53:08:
da:87:3a:54:d6:d0:e6:01:71:42:19:68:fc:ed:a4:
70:53:fc:93:d2:ca:3d:97:65:d4:05:4a:ed:c9:8c:
13:0d:73:69:6f:69:e7:ae:f2:1e:4e:49:26:85:71:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:18:DA:36:80:C3:EF:D7:78:17:87:D8:6E:91:C6:C5:FA:CB:BF:0D
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4b:aa:74:de:16:ae:14:77:ad:39:29:e6:b9:8e:d0:cc:51:
ab:8e:ea:aa:e4:87:eb:b7:08:c0:0b:c3:99:0e:6d:72:36:af:
0a:f7:0b:b0:1f:c2:02:b8:c3:1d:63:39:1b:4d:ea:34:34:82:
08:d8:9b:18:aa:9a:21:47:ca:2b:60:d1:fe:df:92:ae:dc:2e:
8e:d4:03:62:4d:92:b8:04:f1:6b:17:e2:99:d8:50:23:69:7c:
4c:dd:e6:1c:3f:9f:fe:e0:fd:1e:0f:6e:a3:f3:c5:ca:c6:b7:
06:02:f3:9f:f1:5a:64:b7:bf:2b:18:84:9d:8b:66:60:16:b2:
fa:cf:fd:94:a9:b5:08:b1:44:a3:88:20:36:eb:4f:2c:2d:59:
bf:9e:45:26:5b:db:ef:22:77:95:bb:44:30:58:dd:0e:25:cb:
ad:a6:25:c1:ac:20:14:2d:5e:a6:ab:a2:dd:d1:0e:c1:88:75:
cd:10:4a:06:f2:77:50:a3:8f:09:22:37:34:4b:6f:e9:b6:be:
bf:63:af:a9:e2:db:0a:2e:9c:68:19:b9:80:03:50:33:f8:0f:
85:1e:76:fd:28:1d:b5:77:01:28:bc:f6:57:b3:85:15:33:48:
c1:70:ea:ae:b3:d2:b8:df:09:40:80:25:56:d0:71:a1:ac:d1:
d0:22:70:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:23 2025 by rpki-client